)]}'
{"id":"openstack%2Fopenstack-ansible-haproxy_server~829899","triplet_id":"openstack%2Fopenstack-ansible-haproxy_server~master~I4279005d5b4e6133cf85ba43379b51149c838f17","project":"openstack/openstack-ansible-haproxy_server","branch":"master","topic":"tls-backend","attention_set":{},"removed_from_attention_set":{"31749":{"account":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"last_update":"2022-04-26 15:13:05.000000000","reason":"Change was submitted"},"28619":{"account":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"last_update":"2022-02-22 15:23:52.000000000","reason":"Dmitriy Rabotyagov replied on the change"},"25023":{"account":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"last_update":"2022-04-26 15:13:05.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I4279005d5b4e6133cf85ba43379b51149c838f17","subject":"Add functionality to accept both HTTP and HTTPS during upgrade","status":"MERGED","created":"2022-02-18 14:27:49.000000000","updated":"2022-04-26 15:14:40.000000000","submitted":"2022-04-26 15:13:05.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":4,"unresolved_comment_count":1,"has_review_started":true,"submission_id":"829899-tls-backend","meta_rev_id":"2fb83b9574104089fa4b02c4753b6a374126545e","_number":829899,"virtual_id_number":829899,"owner":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},{"value":0,"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2022-04-26 15:13:05.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},"all":[{"value":2,"date":"2022-04-26 13:26:08.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},{"value":2,"date":"2022-02-22 15:26:32.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},"all":[{"value":1,"date":"2022-04-26 13:26:08.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},{"value":0,"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Backport-Candidate":{"all":[{"value":0,"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},{"value":0,"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Not A Backport Candidate"," 0":"Backport Review Needed","+1":"Proposed Backport"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"}],"REVIEWER":[{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2022-02-18 16:47:09.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2022-02-21 11:33:31.000000000","updated_by":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"reviewer":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"state":"REVIEWER"},{"updated":"2022-02-22 15:06:14.000000000","updated_by":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"reviewer":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"state":"CC"},{"updated":"2022-04-26 13:26:08.000000000","updated_by":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},"reviewer":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},"state":"REVIEWER"}],"messages":[{"id":"1a02500a1d4252675b7c2df03506afce55c86a58","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"date":"2022-02-18 14:27:49.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"8ad220a9f6d40dd9fc43e79faa1d4f6ad1edb89e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"date":"2022-02-18 14:29:53.000000000","message":"Uploaded patch set 2: New patch set was added with same tree, parent, and commit message as Patch Set 1.","accounts_in_message":[],"_revision_number":2},{"id":"32502b2b71194604eca5fc0bb8ee94142bff2301","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"date":"2022-02-18 14:42:41.000000000","message":"Uploaded patch set 3: Commit message was updated.","accounts_in_message":[],"_revision_number":3},{"id":"361e65633b676f8c4da3590f01bd481eab6cf236","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-02-18 16:47:09.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-ansible-linters-ubuntu-focal https://zuul.opendev.org/t/openstack/build/928dfaa1a9294646bd22d6af7db3bb85 : SUCCESS in 13m 39s\n- openstack-ansible-deploy-infra_lxc-centos-8-stream https://zuul.opendev.org/t/openstack/build/e3b88478004c4676948c988e84609867 : SUCCESS in 1h 18m 45s\n- openstack-ansible-deploy-infra_lxc-debian-bullseye https://zuul.opendev.org/t/openstack/build/5dd63ef4576046318c53438110bdedc2 : SUCCESS in 59m 26s\n- openstack-ansible-deploy-infra_lxc-ubuntu-focal https://zuul.opendev.org/t/openstack/build/41d9ef276488445d9da409cb9884ae9b : SUCCESS in 1h 10m 42s\n- openstack-ansible-deploy-aio_metal-debian-bullseye https://zuul.opendev.org/t/openstack/build/4b170dbbc3e044fd8dff98225f874355 : SUCCESS in 1h 01m 34s\n- openstack-ansible-deploy-aio_metal-centos-8-stream https://zuul.opendev.org/t/openstack/build/bb84ba5f88414435a329d8c4c75bb018 : SUCCESS in 1h 15m 40s\n- openstack-ansible-deploy-aio_metal-ubuntu-focal https://zuul.opendev.org/t/openstack/build/e2c2d54d4e1b498f825475e24217bd81 : SUCCESS in 1h 26m 37s\n- openstack-ansible-upgrade-aio_metal-centos-8-stream https://zuul.opendev.org/t/openstack/build/853049bdc777488292acada0b32d86c3 : SUCCESS in 1h 52m 04s (non-voting)\n- openstack-ansible-upgrade-aio_metal-ubuntu-focal https://zuul.opendev.org/t/openstack/build/3635a4e7130e4f018d41c16559f255e0 : SUCCESS in 2h 01m 10s\n- openstack-ansible-upgrade-infra_lxc-centos-8-stream https://zuul.opendev.org/t/openstack/build/23d2cbd6305f43f49dacb4186b68fa42 : FAILURE in 18m 48s (non-voting)\n- openstack-ansible-upgrade-infra_lxc-ubuntu-focal https://zuul.opendev.org/t/openstack/build/e53aa41de0744987af6876d29ef5683e : SUCCESS in 1h 30m 07s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1faf9a4205dc49c3bdc8afc420baf94a : SUCCESS in 5m 29s","accounts_in_message":[],"_revision_number":3},{"id":"6f0ad88adb098ac79a47198e11550798067b1a8b","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2022-02-21 11:33:31.000000000","message":"Patch Set 3: Code-Review-1\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"793cf407117fa78a88970efac532b11f90832f22","author":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"date":"2022-02-21 12:46:02.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"7f4236921932b17410577a7983909016d727e9e2","author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"date":"2022-02-22 15:06:14.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"39eda85f367046fd4d02cf33e8c9ab2705012cd3","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2022-02-22 15:23:52.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"9839922ccf2fba5c6065db56eeefdeb2eed03f57","tag":"autogenerated:gerrit:deleteVote","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2022-02-22 15:26:26.000000000","message":"Removed Code-Review-1 by Dmitriy Rabotyagov \u003cnoonedeadpunk@ya.ru\u003e\n","accounts_in_message":[],"_revision_number":3},{"id":"e9729683c362cd41ad180dd7567964d5c0971abc","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2022-02-22 15:26:32.000000000","message":"Patch Set 3: Code-Review+2","accounts_in_message":[],"_revision_number":3},{"id":"1bd3d4e804f56cce839413ad4e47776bfa67f789","author":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"},"date":"2022-04-26 13:26:08.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":3},{"id":"2b6589ce34332c70784922939ce352ce21d285ed","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-26 13:28:54.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"32d0bde04afbc8d0ba4c61c8090b06208dced245","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-26 15:13:05.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-ansible-linters-ubuntu-focal https://zuul.opendev.org/t/openstack/build/39d2b81f7be94d49ad378b96a4e6a0bb : SUCCESS in 11m 26s\n- openstack-ansible-deploy-infra_lxc-centos-8-stream https://zuul.opendev.org/t/openstack/build/f6c51c10a5e94098921a415ba77a637f : SUCCESS in 1h 32m 09s\n- openstack-ansible-deploy-infra_lxc-debian-bullseye https://zuul.opendev.org/t/openstack/build/6f3a6272d9b846159c3b3a7dba7536da : SUCCESS in 1h 15m 51s\n- openstack-ansible-deploy-infra_lxc-rockylinux-8 https://zuul.opendev.org/t/openstack/build/589da29fd8f64f9a86d2042420d9a6b3 : SUCCESS in 1h 26m 06s\n- openstack-ansible-deploy-infra_lxc-ubuntu-focal https://zuul.opendev.org/t/openstack/build/f20c4a5b15804e15adaa9f8a5df1db6f : SUCCESS in 1h 16m 12s\n- openstack-ansible-deploy-aio_metal-debian-bullseye https://zuul.opendev.org/t/openstack/build/4c922c912a3a4c9a876793c7ae9431e1 : SUCCESS in 1h 17m 30s\n- openstack-ansible-deploy-aio_metal-centos-8-stream https://zuul.opendev.org/t/openstack/build/43450179fe8b4285b2637ef4ddba22fa : SUCCESS in 1h 17m 14s\n- openstack-ansible-deploy-aio_metal-ubuntu-focal https://zuul.opendev.org/t/openstack/build/540916a322944e52b748dbf9c3ebc3d6 : SUCCESS in 1h 23m 46s\n- openstack-ansible-deploy-aio_metal-rockylinux-8 https://zuul.opendev.org/t/openstack/build/e08c5401451645abad9dd1107ef80755 : SUCCESS in 1h 18m 37s\n- openstack-ansible-upgrade-infra_lxc-ubuntu-focal https://zuul.opendev.org/t/openstack/build/5a74a7d2890d4b41bb9e6f521950aa12 : SUCCESS in 1h 38m 10s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c02b94aed93a42b79a738f4047e74b85 : SUCCESS in 5m 16s","accounts_in_message":[],"_revision_number":3},{"id":"c88c5d203f4522655ca105bfb3f75a9b594877d9","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-26 15:13:05.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":3},{"id":"2fb83b9574104089fa4b02c4753b6a374126545e","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-26 15:14:40.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2e3ed23b2f054a4991c7c5cf59057be8 : SUCCESS in 1m 02s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"d30bb2e6d12233a5a20a9b739c46e40cbabc5bf9","revisions":{"5cf9e41a0a780ca4326d4866b26313537d9dfa0e":{"kind":"REWORK","_number":1,"created":"2022-02-18 14:27:49.000000000","uploader":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"ref":"refs/changes/99/829899/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-ansible-haproxy_server","ref":"refs/changes/99/829899/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/1"}}},"commit":{"parents":[{"commit":"ab0c91f810ed85ca767c03eeb3aa68f6f2837472","subject":"Merge \"Adjust default configuration to support TLS v1.3\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/ab0c91f810ed85ca767c03eeb3aa68f6f2837472"}]}],"author":{"name":"Ubuntu","email":"ubuntu@aio1.openstack.local","date":"2022-02-17 16:15:41.000000000","tz":0},"committer":{"name":"James Gibson","email":"james.gibson@bbc.co.uk","date":"2022-02-18 14:26:54.000000000","tz":0},"subject":"Add functionality to accept both HTTP and HTTPS during upgrade","message":"Add functionality to accept both HTTP and HTTPS during upgrade\n\nEnable TLS on internal communication has 2 parts\n* Enabling TLS on the internal VIPs for haproxy frontends\n* Enabling TLS on the service backends\nHaproxy has support for enabling TLS on frontends and backends,\nbut doing so would cause downtime.\n\nIn the case of upgrading frontends, enabling TLS would prevent\nopenstack services from working until their config is changed\nfrom http to https, as they do not follow redirects.\n\nIn the case of backends haproxy would mark each backend as down\nbecause if could not initiate a HTTPS connection to the backend\nuntil the backend is updated.\n\nThis patch fixes this and allows haproxy to accept both HTTP and\nHTTPS on the same well known port for each service. It also\nallows for both HTTP and HTTPS backends.\n\nThis is a temporary patch and will be removed once instances have\nbeen upgraded to HTTPS for internal communications in a future\nrelease of OSA.\n\nChange-Id: I4279005d5b4e6133cf85ba43379b51149c838f17\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/5cf9e41a0a780ca4326d4866b26313537d9dfa0e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/5cf9e41a0a780ca4326d4866b26313537d9dfa0e"}]},"branch":"refs/heads/master"},"bc081cf1206b16a9407e4e19629cb0f77fc81c4d":{"kind":"NO_CHANGE","_number":2,"created":"2022-02-18 14:29:53.000000000","uploader":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"ref":"refs/changes/99/829899/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-ansible-haproxy_server","ref":"refs/changes/99/829899/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/2"}}},"commit":{"parents":[{"commit":"ab0c91f810ed85ca767c03eeb3aa68f6f2837472","subject":"Merge \"Adjust default configuration to support TLS v1.3\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/ab0c91f810ed85ca767c03eeb3aa68f6f2837472"}]}],"author":{"name":"JamesGibo","email":"james.gibson@bbc.co.uk","date":"2022-02-17 16:15:41.000000000","tz":0},"committer":{"name":"James Gibson","email":"james.gibson@bbc.co.uk","date":"2022-02-18 14:29:40.000000000","tz":0},"subject":"Add functionality to accept both HTTP and HTTPS during upgrade","message":"Add functionality to accept both HTTP and HTTPS during upgrade\n\nEnable TLS on internal communication has 2 parts\n* Enabling TLS on the internal VIPs for haproxy frontends\n* Enabling TLS on the service backends\nHaproxy has support for enabling TLS on frontends and backends,\nbut doing so would cause downtime.\n\nIn the case of upgrading frontends, enabling TLS would prevent\nopenstack services from working until their config is changed\nfrom http to https, as they do not follow redirects.\n\nIn the case of backends haproxy would mark each backend as down\nbecause if could not initiate a HTTPS connection to the backend\nuntil the backend is updated.\n\nThis patch fixes this and allows haproxy to accept both HTTP and\nHTTPS on the same well known port for each service. It also\nallows for both HTTP and HTTPS backends.\n\nThis is a temporary patch and will be removed once instances have\nbeen upgraded to HTTPS for internal communications in a future\nrelease of OSA.\n\nChange-Id: I4279005d5b4e6133cf85ba43379b51149c838f17\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/bc081cf1206b16a9407e4e19629cb0f77fc81c4d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/bc081cf1206b16a9407e4e19629cb0f77fc81c4d"}]},"branch":"refs/heads/master"},"d30bb2e6d12233a5a20a9b739c46e40cbabc5bf9":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2022-02-18 14:42:41.000000000","uploader":{"_account_id":31749,"name":"James Gibson","email":"james.gibson@bbc.co.uk","username":"jamesgibo"},"ref":"refs/changes/99/829899/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-ansible-haproxy_server","ref":"refs/changes/99/829899/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-ansible-haproxy_server refs/changes/99/829899/3"}}},"commit":{"parents":[{"commit":"ab0c91f810ed85ca767c03eeb3aa68f6f2837472","subject":"Merge \"Adjust default configuration to support TLS v1.3\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/ab0c91f810ed85ca767c03eeb3aa68f6f2837472"}]}],"author":{"name":"JamesGibo","email":"james.gibson@bbc.co.uk","date":"2022-02-17 16:15:41.000000000","tz":0},"committer":{"name":"James Gibson","email":"james.gibson@bbc.co.uk","date":"2022-02-18 14:40:14.000000000","tz":0},"subject":"Add functionality to accept both HTTP and HTTPS during upgrade","message":"Add functionality to accept both HTTP and HTTPS during upgrade\n\nEnable TLS on internal communication has 2 parts\n* Enabling TLS on the internal VIPs for haproxy frontends\n* Enabling TLS on the service backends\nHaproxy has support for enabling TLS on frontends and backends,\nbut doing so would cause downtime.\n\nIn the case of upgrading frontends, enabling TLS would prevent\nopenstack services from working until their config is changed\nfrom http to https, as they do not follow redirects.\n\nIn the case of backends haproxy would mark each backend as down\nbecause if could not initiate a HTTPS connection to the backend\nuntil the backend is updated.\n\nThis patch fixes this and allows haproxy to accept both HTTP and\nHTTPS on the same well known port for each service. It also\nallows for both HTTP and HTTPS backends.\n\nSupport for HTTP and HTTPS on the frontend is enabled by setting\nhaproxy_tcp_upgrade_frontend: true\n\nSupport for HTTP and HTTPS on the backend is enabled by setting\nhaproxy_tcp_upgrade_backend: true\n\nThis is a temporary patch and will be removed once instances have\nbeen upgraded to HTTPS for internal communications in a future\nrelease of OSA.\n\nChange-Id: I4279005d5b4e6133cf85ba43379b51149c838f17\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/d30bb2e6d12233a5a20a9b739c46e40cbabc5bf9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-ansible-haproxy_server/commit/d30bb2e6d12233a5a20a9b739c46e40cbabc5bf9"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":13095,"name":"Marc Gariépy","email":"gariepy.marc@gmail.com","username":"mgariepy"}},{"label":"Backport-Candidate","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}